$ rpki-client -vvf repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft File: FE5652AD4702104DB082C396B05EE5D04542E7D7.mft (raw, json) Hash identifier: nZ9AVoB5IV/o1vUcNo9oEQZahyCoEbpX0iUVF6emUtc= Subject key identifier: 27:CE:95:B4:C5:97:8E:44:CE:B6:DD:23:42:99:24:8F:01:B9:2B:FF Authority key identifier: FE:56:52:AD:47:02:10:4D:B0:82:C3:96:B0:5E:E5:D0:45:42:E7:D7 Certificate issuer: /CN=FE5652AD4702104DB082C396B05EE5D04542E7D7 Certificate serial: 5703240618A14EB664C1CF848A00F1A652136C3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft Manifest number: 01B4 Signing time: Thu 26 Mar 2026 12:22:09 +0000 Manifest this update: Thu 26 Mar 2026 12:17:09 +0000 Manifest next update: Sun 29 Mar 2026 20:37:09 +0000 Files and hashes: 1: FE5652AD4702104DB082C396B05EE5D04542E7D7.crl (hash: NOPmHZwczZK5KzTCisd9SQjqnVHSfAr8DQKvpQbMJEk=) 2: 3130332e3233392e32302e302f32332d3234203d3e20313531353139.roa (hash: J6vL2iPNUwb9fYjqqj1vv1gpk3+iSC5RPrrqhYMFLI8=) 3: 3130332e3233392e32312e302f32342d3234203d3e20313531353139.roa (hash: 03BXaxAzi9VaO+DQQ6QWjZsMJ2gPh3wF9aEYxb1vAPc=) 4: 3130332e3233392e32302e302f32342d3234203d3e20313531353139.roa (hash: 20qa29YtuQDpydBxT+l3i2qfQTa2+tFQJ7mFZgoSVhk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.crl rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:03:24:06:18:a1:4e:b6:64:c1:cf:84:8a:00:f1:a6:52:13:6c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE5652AD4702104DB082C396B05EE5D04542E7D7 Validity Not Before: Mar 26 12:17:09 2026 GMT Not After : Mar 29 20:37:09 2026 GMT Subject: CN=27CE95B4C5978E44CEB6DD234299248F01B92BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:55:f4:ca:41:9e:3c:1b:fd:d3:fc:82:ec: a3:4f:8b:88:f0:18:e6:53:bf:b3:f9:2a:c6:3e:7a: 99:ca:df:b9:11:f9:6f:8b:fe:8e:99:67:26:e6:32: 4f:8a:24:1a:96:fa:63:fa:0e:28:9e:e4:cd:c8:e2: 9c:56:35:60:e1:0a:23:52:78:fa:30:bc:fd:37:51: ca:81:2c:3d:2f:a8:e5:d6:5e:ad:ec:0e:f1:b6:60: a3:98:4e:fa:d6:a9:98:d5:1a:a9:b6:b6:cb:3d:45: 61:63:6d:76:3c:d5:85:c0:14:e7:57:58:86:38:e9: 01:a3:3e:e6:30:2d:e5:58:de:ea:39:03:49:11:cf: c5:5a:48:c8:90:a1:77:17:fe:eb:0e:f6:6c:82:ee: 9b:6c:d4:97:f4:0a:6a:a4:2f:dd:c6:70:09:60:7b: 45:b3:ae:2c:06:4f:ae:19:8b:97:0b:81:9a:b3:49: 80:a1:38:4c:cf:d6:0e:e6:8f:8b:59:8e:97:71:46: 26:fc:ce:34:f3:99:18:81:d7:af:b2:83:e0:95:b5: 8d:8f:ec:3e:7c:fe:c0:18:4c:b5:f1:9c:05:fd:7b: 43:3a:2e:53:cb:09:ca:cf:ef:f2:5b:06:19:8f:ea: d2:98:eb:b6:63:7f:ad:d7:8d:4e:41:9d:b1:06:c5: a0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CE:95:B4:C5:97:8E:44:CE:B6:DD:23:42:99:24:8F:01:B9:2B:FF X509v3 Authority Key Identifier: keyid:FE:56:52:AD:47:02:10:4D:B0:82:C3:96:B0:5E:E5:D0:45:42:E7:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE5652AD4702104DB082C396B05EE5D04542E7D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/FE5652AD4702104DB082C396B05EE5D04542E7D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4e:19:43:df:d9:4f:f9:bc:2c:59:90:fb:91:36:da:7f:7d: 56:3f:4b:1d:c3:dd:c0:9e:8f:12:83:d9:fd:ce:ed:a7:b3:9b: 9c:05:8b:84:18:ff:e7:2e:42:53:8f:d7:e2:d7:4a:e1:41:0e: f5:ae:ae:e5:f6:43:f1:a8:c4:f7:81:e6:d9:bb:54:36:1b:22: f7:7a:15:66:0a:ad:71:3e:4c:1f:08:f6:e7:e0:0a:a3:5e:1e: 2f:87:67:1c:a6:10:df:eb:a3:c9:b9:13:7e:99:bb:4c:ec:d9: ae:20:d6:d7:9b:89:d0:3d:23:c0:8a:54:e0:d3:e8:b5:32:58: f4:81:bc:b9:34:d7:49:70:b8:1f:d1:4c:2d:07:bd:23:aa:2c: 3c:bd:4a:b0:2a:00:f8:16:ff:99:b2:25:8a:70:ed:d5:bc:8f: 44:be:93:8b:ba:17:e2:6a:f9:da:84:90:b2:13:f0:1d:10:16: 3c:5a:db:7a:fa:a2:f6:a9:11:9a:d0:6c:03:fe:6e:2a:6c:4f: 8c:b1:7e:01:70:f4:5a:06:52:6e:9f:91:4c:f6:4d:76:17:4c: 74:a6:c9:46:17:fd:e2:2c:a0:4e:63:f4:51:b0:65:c1:32:1c: d2:f8:97:18:78:00:cb:42:72:b0:62:eb:8b:e5:e5:d7:bc:51: c9:bb:21:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVwMkBhihTrZkwc+EigDxplITbDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1RDA0 NTQyRTdENzAeFw0yNjAzMjYxMjE3MDlaFw0yNjAzMjkyMDM3MDlaMDMxMTAvBgNV BAMTKDI3Q0U5NUI0QzU5NzhFNDRDRUI2REQyMzQyOTkyNDhGMDFCOTJCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3NlX0ykGePBv90/yC7KNPi4jw GOZTv7P5KsY+epnK37kR+W+L/o6ZZybmMk+KJBqW+mP6Diie5M3I4pxWNWDhCiNS ePowvP03UcqBLD0vqOXWXq3sDvG2YKOYTvrWqZjVGqm2tss9RWFjbXY81YXAFOdX WIY46QGjPuYwLeVY3uo5A0kRz8VaSMiQoXcX/usO9myC7pts1Jf0CmqkL93GcAlg e0WzriwGT64Zi5cLgZqzSYChOEzP1g7mj4tZjpdxRib8zjTzmRiB16+yg+CVtY2P 7D58/sAYTLXxnAX9e0M6LlPLCcrP7/JbBhmP6tKY67Zjf63XjU5BnbEGxaD1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ86VtMWXjkTOtt0jQpkkjwG5K/8wHwYDVR0j BBgwFoAU/lZSrUcCEE2wgsOWsF7l0EVC59cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2FmZDU3YS1lNmRlLTRhNWYtYjVjNi0xMDg2NWQ1YThjOTgvMC9GRTU2NTJBRDQ3 MDIxMDREQjA4MkMzOTZCMDVFRTVEMDQ1NDJFN0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1RDA0NTQy RTdENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdhZmQ1N2EtZTZkZS00YTVmLWI1 YzYtMTA4NjVkNWE4Yzk4LzAvRkU1NjUyQUQ0NzAyMTA0REIwODJDMzk2QjA1RUU1 RDA0NTQyRTdENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1OGUPf2U/5vCxZkPuRNtp/fVY/Sx3D3cCe jxKD2f3O7aezm5wFi4QY/+cuQlOP1+LXSuFBDvWuruX2Q/GoxPeB5tm7VDYbIvd6 FWYKrXE+TB8I9ufgCqNeHi+HZxymEN/ro8m5E36Zu0zs2a4g1tebidA9I8CKVODT 6LUyWPSBvLk010lwuB/RTC0HvSOqLDy9SrAqAPgW/5myJYpw7dW8j0S+k4u6F+Jq +dqEkLIT8B0QFjxa23r6ovapEZrQbAP+bipsT4yxfgFw9FoGUm6fkUz2TXYXTHSm yUYX/eIsoE5j9FGwZcEyHNL4lxh4AMtCcrBi64vl5de8Ucm7IQQ= -----END CERTIFICATE-----Generated at Thu Mar 26 15:58:39 2026 by rpki-client